Move invite API endpoint docs from Fleet configuration heading to use…

…r heading, add missing mfa_enabled fields on invite endpoints (#24986)

For #24985. Also rewords rather verbose "these are authenticated
endpoints" descriptions for both subheadings.